aboutsummaryrefslogtreecommitdiffstats
path: root/libavformat/tls.h
Commit message (Collapse)AuthorAgeFilesLines
* avformat/tls: make passing an external socket universalTimo Rothenpieler2025-07-111-5/+4
|
* avformat/tls: rename accidentally changed optionsMarvin Scholz2025-07-081-2/+2
| | | | | | | These were accidentally renamed back to the old names in ba9817df9df5911ceb2edff37d9ec970c29329e2 Reviewed-by: Timo Rothenpieler <timo@rothenpieler.org>
* avformat/tls: move common client options into their own defineMarvin Scholz2025-07-071-5/+9
| | | | Used in a future commit to not duplicate options.
* avformat/tls: clean up new whip optionsTimo Rothenpieler2025-07-031-3/+3
|
* avformat/tls: remove unused fingerprint optionTimo Rothenpieler2025-07-031-4/+1
|
* avformat/tls: Fix integer overflow with option mtuZhao Zhili2025-06-071-1/+1
| | | | Signed-off-by: Zhao Zhili <zhilizhao@tencent.com>
* avformat/whip: Add WHIP muxer support for subsecond latency streamingJack Lau2025-06-041-2/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0. WHIP Version 3. 1. The WHIP muxer has been renamed and refined, with improved logging context and error messages for SSL, DTLS, and RTC. 2. Magic numbers have been replaced with macros and extracted to functions, and log levels have been altered for better clarity. 3. DTLS curve list has been updated, and SRTP profile names have been refined for FFmpeg and OpenSSL. 4. ICE STUN magic number has been refined, and RTP payload types have been updated based on Chrome's definition. 5. Fixed frame size has been refined to rtc->audio_par->frame_size, and h264_mp4toannexb is now used to convert MP4/ISOM to annexb. 6. OPUS timestamp issue has been addressed, and marker setting has been corrected after utilizing BSF. 7. DTLS handshake and ICE handling have been optimized for improved performance, with a single handshake timeout and server role to prevent ARQ. 8. Consolidated ICE request/response handling and DTLS handshake into a single function, and fixed OpenSSL build errors to work with Pion. 9. Merge TLS & DTLS implementation, shared BIO callbacks, read, write, print_ssl_error, openssl_init_ca_key_cert, init_bio_method function and shared same data structure 10. Modify configure that whip is enabled only dtls is enabled(just support openssl for now) to fix build error Co-authored-by: winlin <winlinvip@gmail.com> Co-authored-by: yangrtc <yangrtc@aliyun.com> Co-authored-by: cloudwebrtc <duanweiwei1982@gmail.com> Co-authored-by: Haibo Chen <495810242@qq.com> Co-authored-by: Steven Liu <lq@chinaffmpeg.org> Co-authored-by: Jun Zhao <barryjzhao@tencent.com> Signed-off-by: Jack Lau <jacklau1222@qq.com> Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
* avformat/http,tls: honor http_proxy command line variable for HTTPSMoritz Barsnick2021-03-191-1/+3
| | | | | | | | | | | | | | | | | | Add the "http_proxy" option and its handling to the "tls" protocol, pass the option from the "https" protocol. The "https" protocol already defines the "http_proxy" command line option, like the "http" protocol does. The "http" protocol properly honors that command line option in addition to the environment variable. The "https" protocol doesn't, because the proxy is evaluated in the underlying "tls" protocol, which doesn't have this option, and thus only handles the environment variable, which it has access to. Fixes #7223. Signed-off-by: Moritz Barsnick <barsnick@gmx.net> Signed-off-by: Marton Balint <cus@passwd.hu>
* Merge commit '4cf84e254ae75b524e1cacae499a97d7cc9e5906'James Almer2018-02-111-2/+2
|\ | | | | | | | | | | | | * commit '4cf84e254ae75b524e1cacae499a97d7cc9e5906': Drop some unnecessary config.h #includes Merged-by: James Almer <jamrial@gmail.com>
| * Drop some unnecessary config.h #includesDiego Biurrun2018-02-061-2/+2
| |
* | Merge commit '61cec5adaacb358783c18aa07362f15824c1b274'James Almer2017-11-011-2/+0
|\| | | | | | | | | | | | | | | | | | | * commit '61cec5adaacb358783c18aa07362f15824c1b274': tls: Hide backend implementation details from users Also includes ed434be106a4615e0419b3ac7664220741afda2d Changes were made to support schannel and securetransport. Merged-by: James Almer <jamrial@gmail.com>
| * tls: Hide backend implementation details from usersDiego Biurrun2017-06-021-2/+0
| | | | | | | | | | | | | | | | TLS is currently implemented over either OpenSSL or GnuTLS, with more backends likely to appear in the future. Currently, those backend libraries are part of the protocol names used during e.g. the configure stage of a build. Hide those details behind a generically-named declaration for the TLS protocol to avoid leaking those details into the configuration stage.
| * lavf: move TLS-related ifdeffery to library specific fileswm42015-05-261-0/+6
| | | | | | | | | | | | There is no need to have this mess in network.c. Signed-off-by: Martin Storsjö <martin@martin.st>
| * lavf: split tls.cwm42015-05-261-0/+54
| | | | | | | | Move the OpenSSL and GnuTLS implementations to their own files. Other than the connection code (including options) and some boilerplate, no code is actually shared. Signed-off-by: Martin Storsjö <martin@martin.st>
* avformat: implement SChannel SSP TLS protocolHendrik Leppkes2015-11-141-1/+1
| | | | | | | | | | | | This implementation does not support TLS listen sockets and loading CA/Certs from files. The Windows API does not support loading PEM certs, and would either require a manual loader or instead be limited to loading Windows PFX certificates TLS listen sockets would have to be implemented quite separately, as many of the APIs are different for server-mode (as opposed to client mode).
* lavf/tls: let the user specify what name to verify againstRodger Combs2015-06-081-2/+5
| | | | | | | This can be useful for debugging, or in scenarios where the user doesn't want to use the system's DNS settings for whatever reason. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* lavf/tls: Support Secure TransportRodger Combs2015-05-291-1/+1
| | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* lavf: move TLS-related ifdeffery to library specific fileswm42015-05-271-0/+6
| | | | | | There is no need to have this mess in network.c. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* lavf: split tls.cwm42015-05-271-0/+55
Move the OpenSSL and GnuTLS implementations to their own files. Other than the connection code (including options) and some boilerplate, no code is actually shared. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>